Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: When Features Do More Than They Should
════════════════════════
𐀪 Author: Asjad Butt
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 20:32:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugcrowd #security #vulnerability #hacking
Medium
When Features Do More Than They Should
Some security issues don’t come from complex systems or clever exploitation. They come from ordinary features doing slightly more than…
24 views
Daily Writeups
⤷ Title: Finding an IDOR in Tesla From the Outside
════════════════════════
𐀪 Author: Asjad Butt
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:59:27 GMT
════════════════════════
⌗ Tags: #hacking #software_development #tesla #bugcrowd #bug_bounty
Medium
Finding an IDOR in Tesla From the Outside
When you’re testing applications, you’ll eventually hit a wall — a point where the intended user flow just isn’t accessible.
15 views
Daily Writeups
⤷ Title: From Recon to Letter of Recognition | NASA VDP
════════════════════════
𐀪 Author: Wahyu Priambodo
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:04:17 GMT
════════════════════════
⌗ Tags: #source_code_disclosure #nasa_vdp #bugcrowd #bug_bounty
Medium
From Recon to Letter of Recognition | NASA VDP
Full Source Code Disclosure from a “.git” Repository
12 views
Daily Writeups
⤷ Title: A Critical IDOR That Allowed Me to Delete Any User Account
════════════════════════
𐀪 Author: mrx_w_
════════════════════════
ⴵ Time: Thu, 07 May 2026 23:40:39 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #hackerone #bug_bounty #bugcrowd
Medium
A Critical IDOR That Allowed Me to Delete Any User Account
Hi, I’m mrx_w_ (Adem Ziane Berroudja), a bug bounty hunter on Bugcrowd. You can find me on Twitter and LinkedIn under mrx_w_. In this…
28 views
Daily Writeups
⤷ Title: Full Disclosure: How Bugcrowd Marked a TEE Authentication Bypass as a Duplicate — Of a Finding They…
════════════════════════
𐀪 Author: Levi
════════════════════════
ⴵ Time: Thu, 14 May 2026 12:40:18 GMT
════════════════════════
⌗ Tags: #duplicate #bug_bounty #triage #bugcrowdfail #bugcrowd
Medium
Full Disclosure: How Bugcrowd Marked a TEE Authentication Bypass as a Duplicate — Of a Finding They Closed as Not Applicable
Preface
13 views
Daily Writeups
⤷ Title: How I Found a Permanent Account Takeover Through SSO Account Linking Misconfiguration
════════════════════════
𐀪 Author: El Professor Qais
════════════════════════
ⴵ Time: Sun, 24 May 2026 21:06:27 GMT
════════════════════════
⌗ Tags: #google_sso #bugcrowd #bug_bounty #account_takeover #bug_bounty_tips
Medium
How I Found a Permanent Account Takeover Through SSO Account Linking Misconfiguration
Educational write-up for security research and responsible disclosure purposes only. Founded it in BugCrowd Private Program 🔥
23 views
Daily Writeups
⤷ Title: When “One-Time” Isn’t Enough: The Case of the Reusable Magic Link
════════════════════════
𐀪 Author: Just_try_shit
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:36:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #passwordless #bug_bounty_writeup #bugcrowd
Medium
When “One-Time” Isn’t Enough: The Case of the Reusable Magic Link
Introduction
13 views
Daily Writeups
⤷ Title: Why Your Subdomain Takeover Reports Keep Getting Closed as N/A (And How to Fix It).
════════════════════════
𐀪 Author: Omar Mahmoud
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 11:04:39 GMT
════════════════════════
⌗ Tags: #subdomain_takeover #red_team #bug_bounty #bugcrowd #hackerone
Medium
Why Your Subdomain Takeover Reports Keep Getting Closed as N/A (And How to Fix It).
Subdomain Takeover is often described as one of the easiest vulnerabilities to find in Bug Bounty programs. Even today, hunters continue to…
14 views
Daily Writeups
⤷ Title: Reflected XSS Made Stupidly Simple
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 11:31:00 GMT
════════════════════════
⌗ Tags: #hackerone #bugcrowd #hacker #bug_bounty_writeup #hacking
Medium
Reflected XSS Made Stupidly Simple
Hey everyone! Nitin here ⚡
23 views
Daily Writeups
⤷ Title: How a Simple Google Dork Earned Me My First Bounty from Bugcrowd’s Own Bug Bounty Program
════════════════════════
𐀪 Author: MD Akhlakur Rahman Tanvir
════════════════════════
ⴵ Time: Sun, 14 Jun 2026 12:09:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugcrowd #infosec_write_ups #bug_bounty_writeup #bug_bounty
Medium
How a Simple Google Dork Earned Me My First Bounty from Bugcrowd’s Own Bug Bounty Program
Hi, I’m Tanvir, a Noob Bug Bounty hunter :) .I wanted to share my first bug bounty with you all.
13 views
Daily Writeups
⤷ Title: How I Escalated Privileges in a File-Sharing Platform by Changing One Word
════════════════════════
𐀪 Author: Kerolos Iskander (ker0los)
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 03:18:06 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty #cybersecurity #bug_bounty_tips #bugcrowd
Medium
How I Escalated Privileges in a File-Sharing Platform by Changing One Word
Written by Kerolos Iskander | Jr. Penetration Tester
20 views
Daily Writeups
⤷ Title: Unauthenticated IDOR on NASA’s GitLab Instance — From Recon to Bypass
════════════════════════
𐀪 Author: Ghaddarittoo
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 16:57:29 GMT
════════════════════════
⌗ Tags: #nasa #bug_bounty #security_research #bugcrowd #broken_access_control
Medium
Unauthenticated IDOR on NASA’s GitLab Instance — From Recon to Bypass
Target: gitlab.smce.nasa.gov Program: NASA VDP (Bugcrowd) Severity: P3 — Broken Access Control / IDOR Status: Resolved
25 views
Daily Writeups
⤷ Title: Broken Access Control — 2026’s #1 Bug
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #access_control #bug_bounty #owasp #hacker #bugcrowd
Medium
Broken Access Control — 2026’s #1 Bug
Hey everyone! Nitin here 👋
16 views
Daily Writeups
⤷ Title: How to Get a Private Bug Bounty Invite on HackerOne — Without Submitting a Single Report
════════════════════════
𐀪 Author: Swarooppatil
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 17:40:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_reports #bugcrowd #cybersecurity #hackerone
Medium
How to Get a Private Bug Bounty Invite on HackerOne — Without Submitting a Single Report
The legitimate “side door” most beginners don’t know exists
23 views
Daily Writeups
⤷ Title: Can You Build a Career on Bugcrowd? I’m Going to Test It. (Day 0)
════════════════════════
𐀪 Author: Mrutunjaya Senapati
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 18:31:00 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #bugcrowd #bounty_program #bug_bounty
Medium
Can You Build a Career on Bugcrowd? I’m Going to Test It. (Day 0)
🧠 Idea That Hit Me Today…
16 views